معرفی شرکت ها
cloud-governance-1.1.93
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
1.1.93
1.1.92
1.1.91
1.1.90
1.1.9
1.1.89
1.1.88
1.1.87
1.1.86
1.1.85
1.1.84
1.1.83
1.1.82
1.1.81
1.1.80
1.1.8
1.1.79
1.1.78
1.1.77
1.1.76
1.1.75
1.1.74
1.1.73
1.1.72
1.1.71
1.1.70
1.1.7
1.1.69
1.1.68
1.1.67
1.1.66
1.1.65
1.1.64
1.1.63
1.1.62
1.1.61
1.1.60
1.1.6
1.1.59
1.1.58
1.1.57
1.1.56
1.1.55
1.1.54
1.1.53
1.1.52
1.1.51
1.1.50
1.1.5
1.1.49
1.1.48
1.1.47
1.1.46
1.1.45
1.1.44
1.1.43
1.1.42
1.1.41
1.1.40
1.1.4
1.1.39
1.1.38
1.1.37
1.1.36
1.1.35
1.1.34
1.1.33
1.1.32
1.1.31
1.1.30
1.1.3
1.1.29
1.1.28
1.1.27
1.1.26
1.1.25
1.1.24
1.1.23
1.1.22
1.1.21
1.1.20
1.1.2
1.1.19
1.1.18
1.1.17
1.1.16
1.1.15
1.1.14
1.1.13
1.1.12
1.1.11
1.1.10
1.1.1
1.1.0
1.0.99
1.0.98
1.0.97
1.0.96
1.0.95
1.0.94
1.0.93
1.0.92
1.0.91
1.0.90
1.0.9
1.0.89
1.0.88
1.0.87
1.0.86
1.0.85
1.0.84
1.0.83
1.0.82
1.0.81
1.0.80
1.0.8
1.0.79
1.0.78
1.0.77
1.0.76
1.0.75
1.0.74
1.0.73
1.0.72
1.0.71
1.0.70
1.0.7
1.0.69
1.0.68
1.0.67
1.0.66
1.0.65
1.0.64
1.0.63
1.0.62
1.0.61
1.0.60
1.0.6
1.0.59
1.0.58
1.0.57
1.0.56
1.0.55
1.0.54
1.0.53
1.0.52
1.0.51
1.0.50
1.0.49
1.0.48
1.0.47
1.0.46
1.0.45
1.0.434
1.0.433
1.0.432
1.0.431
1.0.430
1.0.43
1.0.429
1.0.428
1.0.427
1.0.426
1.0.425
1.0.424
1.0.423
1.0.422
1.0.421
1.0.420
1.0.419
1.0.418
1.0.417
1.0.416
1.0.415
1.0.414
1.0.413
1.0.412
1.0.411
1.0.410
1.0.41
1.0.409
1.0.408
1.0.407
1.0.406
1.0.405
1.0.404
1.0.403
1.0.402
1.0.401
1.0.400
1.0.40
1.0.4
1.0.399
1.0.398
1.0.397
1.0.396
1.0.395
1.0.394
1.0.393
1.0.392
1.0.391
1.0.390
1.0.39
1.0.389
1.0.388
1.0.387
1.0.386
1.0.385
1.0.384
1.0.383
1.0.382
1.0.381
1.0.380
1.0.38
1.0.379
1.0.378
1.0.377
1.0.376
1.0.375
1.0.374
1.0.373
1.0.372
1.0.371
1.0.370
1.0.37
1.0.369
1.0.368
1.0.367
1.0.366
1.0.365
1.0.364
1.0.363
1.0.362
1.0.361
1.0.360
1.0.36
1.0.359
1.0.358
1.0.357
1.0.356
1.0.355
1.0.354
1.0.353
1.0.352
1.0.351
1.0.350
1.0.35
1.0.349
1.0.348
1.0.347
1.0.346
1.0.345
1.0.344
1.0.343
1.0.342
1.0.341
1.0.340
1.0.34
1.0.339
1.0.338
1.0.337
1.0.336
1.0.335
1.0.334
1.0.333
1.0.332
1.0.331
1.0.330
1.0.329
1.0.328
1.0.327
1.0.326
1.0.325
1.0.324
1.0.323
1.0.322
1.0.321
1.0.320
1.0.32
1.0.319
1.0.318
1.0.317
1.0.316
1.0.315
1.0.314
1.0.313
1.0.312
1.0.311
1.0.310
1.0.31
1.0.309
1.0.308
1.0.307
1.0.306
1.0.305
1.0.304
1.0.303
1.0.302
1.0.301
1.0.300
1.0.30
1.0.3
1.0.299
1.0.298
1.0.297
1.0.296
1.0.295
1.0.294
1.0.293
1.0.292
1.0.291
1.0.290
1.0.29
1.0.289
1.0.288
1.0.287
1.0.286
1.0.285
1.0.284
1.0.283
1.0.282
1.0.281
1.0.280
1.0.28
1.0.279
1.0.278
1.0.277
1.0.276
1.0.275
1.0.274
1.0.273
1.0.272
1.0.271
1.0.270
1.0.27
1.0.269
1.0.268
1.0.267
1.0.266
1.0.265
1.0.264
1.0.263
1.0.262
1.0.261
1.0.260
1.0.26
1.0.259
1.0.258
1.0.257
1.0.256
1.0.255
1.0.254
1.0.253
1.0.252
1.0.251
1.0.250
1.0.25
1.0.249
1.0.248
1.0.247
1.0.246
1.0.245
1.0.244
1.0.242
1.0.241
1.0.240
1.0.24
1.0.239
1.0.238
1.0.237
1.0.236
1.0.235
1.0.234
1.0.233
1.0.232
1.0.231
1.0.230
1.0.23
1.0.229
1.0.228
1.0.227
1.0.226
1.0.225
1.0.224
1.0.223
1.0.222
1.0.221
1.0.220
1.0.219
1.0.218
1.0.217
1.0.216
1.0.215
1.0.214
1.0.213
1.0.212
1.0.211
1.0.210
1.0.21
1.0.209
1.0.208
1.0.207
1.0.206
1.0.205
1.0.204
1.0.203
1.0.202
1.0.201
1.0.200
1.0.2
1.0.199
1.0.198
1.0.197
1.0.196
1.0.195
1.0.194
1.0.193
1.0.192
1.0.191
1.0.190
1.0.189
1.0.188
1.0.187
1.0.186
1.0.185
1.0.184
1.0.183
1.0.182
1.0.181
1.0.180
1.0.179
1.0.178
1.0.177
1.0.176
1.0.175
1.0.174
1.0.173
1.0.172
1.0.171
1.0.170
1.0.169
1.0.168
1.0.167
1.0.166
1.0.165
1.0.164
1.0.163
1.0.162
1.0.161
1.0.160
1.0.159
1.0.158
1.0.157
1.0.156
1.0.155
1.0.154
1.0.153
1.0.152
1.0.151
1.0.150
1.0.15
1.0.149
1.0.148
1.0.147
1.0.146
1.0.145
1.0.144
1.0.143
1.0.142
1.0.141
1.0.140
1.0.14
1.0.139
1.0.138
1.0.137
1.0.136
1.0.135
1.0.134
1.0.133
1.0.132
1.0.131
1.0.130
1.0.129
1.0.128
1.0.127
1.0.126
1.0.125
1.0.124
1.0.123
1.0.122
1.0.121
1.0.120
1.0.12
1.0.119
1.0.118
1.0.117
1.0.116
1.0.115
1.0.114
1.0.113
1.0.112
1.0.111
1.0.110
1.0.11
1.0.109
1.0.108
1.0.107
1.0.106
1.0.105
1.0.104
1.0.103
1.0.102
1.0.101
1.0.100
1.0.10
1.0.1
1.0.0
1.1.93
1.1.92
1.1.91
1.1.90
1.1.9
1.1.89
1.1.88
1.1.87
1.1.86
1.1.85
1.1.84
1.1.83
1.1.82
1.1.81
1.1.80
1.1.8
1.1.79
1.1.78
1.1.77
1.1.76
1.1.75
1.1.74
1.1.73
1.1.72
1.1.71
1.1.70
1.1.7
1.1.69
1.1.68
1.1.67
1.1.66
1.1.65
1.1.64
1.1.63
1.1.62
1.1.61
1.1.60
1.1.6
1.1.59
1.1.58
1.1.57
1.1.56
1.1.55
1.1.54
1.1.53
1.1.52
1.1.51
1.1.50
1.1.5
1.1.49
1.1.48
1.1.47
1.1.46
1.1.45
1.1.44
1.1.43
1.1.42
1.1.41
1.1.40
1.1.4
1.1.39
1.1.38
1.1.37
1.1.36
1.1.35
1.1.34
1.1.33
1.1.32
1.1.31
1.1.30
1.1.3
1.1.29
1.1.28
1.1.27
1.1.26
1.1.25
1.1.24
1.1.23
1.1.22
1.1.21
1.1.20
1.1.2
1.1.19
1.1.18
1.1.17
1.1.16
1.1.15
1.1.14
1.1.13
1.1.12
1.1.11
1.1.10
1.1.1
1.1.0
1.0.99
1.0.98
1.0.97
1.0.96
1.0.95
1.0.94
1.0.93
1.0.92
1.0.91
1.0.90
1.0.89
1.0.88
1.0.87
1.0.86
1.0.85
1.0.84
1.0.83
1.0.82
1.0.81
1.0.80
1.0.79
1.0.78
1.0.77
1.0.76
1.0.75
1.0.74
1.0.73
1.0.72
1.0.71
1.0.70
1.0.69
1.0.68
1.0.67
1.0.66
1.0.65
1.0.64
1.0.63
1.0.62
1.0.61
1.0.60
1.0.59
1.0.58
1.0.57
1.0.56
1.0.55
1.0.54
1.0.53
1.0.52
1.0.51
1.0.50
1.0.49
1.0.48
1.0.47
1.0.434
1.0.433
1.0.432
1.0.431
1.0.430
1.0.429
1.0.428
1.0.427
1.0.426
1.0.425
1.0.424
1.0.423
1.0.422
1.0.421
1.0.420
1.0.419
1.0.418
1.0.417
1.0.416
1.0.415
1.0.414
1.0.413
1.0.412
1.0.411
1.0.410
1.0.409
1.0.408
1.0.407
1.0.406
1.0.405
1.0.404
1.0.403
1.0.402
1.0.401
1.0.400
1.0.399
1.0.398
1.0.397
1.0.396
1.0.395
1.0.394
1.0.393
1.0.392
1.0.391
1.0.390
1.0.389
1.0.388
1.0.387
1.0.386
1.0.385
1.0.384
1.0.383
1.0.382
1.0.381
1.0.380
1.0.379
1.0.378
1.0.377
1.0.376
1.0.375
1.0.374
1.0.373
1.0.372
1.0.371
1.0.370
1.0.369
1.0.368
1.0.367
1.0.366
1.0.365
1.0.364
1.0.363
1.0.362
1.0.361
1.0.360
1.0.359
1.0.358
1.0.357
1.0.356
1.0.355
1.0.354
1.0.353
1.0.352
1.0.351
1.0.350
1.0.349
1.0.348
1.0.347
1.0.346
1.0.345
1.0.344
1.0.343
1.0.342
1.0.341
1.0.340
1.0.339
1.0.338
1.0.337
1.0.336
1.0.335
1.0.334
1.0.333
1.0.332
1.0.331
1.0.330
1.0.329
1.0.328
1.0.327
1.0.326
1.0.325
1.0.324
1.0.323
1.0.322
1.0.321
1.0.320
1.0.319
1.0.318
1.0.317
1.0.316
1.0.315
1.0.314
1.0.313
1.0.312
1.0.311
1.0.310
1.0.309
1.0.308
1.0.307
1.0.306
1.0.305
1.0.304
1.0.303
1.0.302
1.0.301
1.0.300
1.0.299
1.0.298
1.0.297
1.0.296
1.0.295
1.0.294
1.0.293
1.0.292
1.0.291
1.0.290
1.0.289
1.0.288
1.0.287
1.0.286
1.0.285
1.0.284
1.0.283
1.0.282
1.0.281
1.0.280
1.0.279
1.0.278
1.0.277
1.0.276
1.0.275
1.0.274
1.0.273
1.0.272
1.0.271
1.0.270
1.0.269
1.0.268
1.0.267
1.0.266
1.0.265
1.0.264
1.0.263
1.0.262
1.0.261
1.0.260
1.0.259
1.0.258
1.0.257
1.0.256
1.0.255
1.0.254
1.0.253
1.0.252
1.0.251
1.0.250
1.0.249
1.0.248
1.0.247
1.0.246
1.0.245
1.0.244
1.0.242
1.0.241
1.0.240
1.0.239
1.0.238
1.0.237
1.0.236
1.0.234
1.0.233
1.0.232
1.0.231
1.0.230
1.0.229
1.0.228
1.0.227
1.0.226
1.0.225
1.0.224
1.0.223
1.0.222
1.0.221
1.0.220
1.0.219
1.0.218
1.0.217
1.0.216
1.0.215
1.0.214
1.0.213
1.0.212
1.0.211
1.0.210
1.0.209
1.0.208
1.0.207
1.0.206
1.0.205
1.0.204
1.0.203
1.0.202
1.0.201
1.0.200
1.0.199
1.0.198
1.0.197
1.0.196
1.0.195
1.0.194
1.0.193
1.0.192
1.0.191
1.0.189
1.0.188
1.0.187
1.0.186
1.0.185
1.0.184
1.0.183
1.0.182
1.0.181
1.0.180
1.0.179
1.0.178
1.0.177
1.0.176
1.0.175
1.0.174
1.0.173
1.0.172
1.0.171
1.0.170
1.0.169
1.0.168
1.0.167
1.0.166
1.0.165
1.0.164
1.0.163
1.0.162
1.0.161
1.0.160
1.0.159
1.0.158
1.0.157
1.0.156
1.0.155
1.0.154
1.0.153
1.0.152
1.0.151
1.0.150
1.0.149
1.0.148
1.0.147
1.0.146
1.0.145
1.0.144
1.0.143
1.0.142
1.0.141
1.0.140
1.0.139
1.0.138
1.0.137
1.0.136
1.0.135
1.0.134
1.0.133
1.0.132
1.0.131
1.0.130
1.0.129
1.0.128
1.0.127
1.0.126
1.0.125
1.0.124
1.0.123
1.0.122
1.0.121
1.0.120
1.0.119
1.0.118
1.0.117
1.0.116
1.0.115
1.0.114
1.0.113
1.0.112
1.0.111
1.0.110
1.0.109
1.0.108
1.0.107
1.0.106
1.0.105
1.0.104
1.0.103
1.0.102
1.0.101
1.0.100
توضیحات
Cloud Governance Tool
| ویژگی | مقدار |
|---|---|
| سیستم عامل | - |
| نام فایل | cloud-governance-1.1.93 |
| نام | cloud-governance |
| نسخه کتابخانه | 1.1.93 |
| نگهدارنده | [] |
| ایمیل نگهدارنده | [] |
| نویسنده | Red Hat |
| ایمیل نویسنده | ebattat@redhat.com, athiruma@redhat.com |
| آدرس صفحه اصلی | https://github.com/redhat-performance/cloud-governance |
| آدرس اینترنتی | https://pypi.org/project/cloud-governance/ |
| مجوز | Apache License 2.0 |
[](https://pypi.org/project/cloud-governance/)
[](https://quay.io/repository/ebattat/cloud-governance?tab=tags)
[](https://github.com/redhat-performance/cloud-governance/actions)
[](https://coveralls.io/github/redhat-performance/cloud-governance?branch=main)
[](https://cloud-governance.readthedocs.io/en/latest/?badge=latest)
[](https://pypi.org/project/cloud-governance)
[](https://github.com/redhat-performance/cloud-governance/blob/main/LICENSE)
# Cloud Governance
## What is it?
**Cloud Governance** tool provides a lightweight and flexible framework for deploying cloud management policies focusing on cost optimize and security.
This tool support the following policies:
[policy](cloud_governance/policy)
[AWS Polices](cloud_governance/policy/aws)
* Real time Openshift Cluster cost, User cost
* [ec2_idle](cloud_governance/policy/aws/ec2_idle.py): idle ec2 in last 4 days, cpu < 2% & network < 5mb.
* [ec2_run](cloud_governance/policy/aws/ec2_run.py): running ec2.
* [ebs_unattached](cloud_governance/policy/aws/ebs_unattached.py): volumes that did not connect to instance, volume in available status.
* [ebs_in_use](cloud_governance/policy/aws/ebs_in_use.py): in use volumes.
* [tag_resources](cloud_governance/policy/policy_operations/aws/tag_cluster): Update cluster and non cluster resource tags fetching from the user tags or from the mandatory tags
* [zombie_cluster_resource](cloud_governance/policy/aws/zombie_cluster_resource.py): Delete cluster's zombie resources
* [tag_non_cluster](cloud_governance/policy/policy_operations/aws/tag_non_cluster): tag ec2 resources (instance, volume, ami, snapshot) by instance name
* [tag_iam_user](cloud_governance/policy/policy_operations/aws/tag_user): update the user tags from the csv file
* [cost_explorer](cloud_governance/policy/aws/cost_explorer.py): Get data from cost explorer and upload to ElasticSearch
* [ip_unattached](cloud_governance/policy/aws/ip_unattached.py): Get the unattached IP and delete it after 7 days.
* [s3_inactive](cloud_governance/policy/aws/s3_inactive.py): Get the inactive/empty buckets and delete them after 7 days.
* [empty_roles](cloud_governance/policy/aws/empty_roles.py): Get empty roles and delete it after 7 days.
* [zombie_snapshots](cloud_governance/policy/aws/zombie_snapshots.py): Get the zombie snapshots and delete it after 7 days.
* [nat_gateway_unused](cloud_governance/policy/aws/unused_nat_gateway.py): Get the unused nat gateways and deletes it after 7 days.
* gitleaks: scan Github repository git leak (security scan)
* [cost_over_usage](cloud_governance/policy/aws/cost_over_usage.py): send mail to aws user if over usage cost
[IBM policies](cloud_governance/policy/ibm)
* [tag_baremetal](cloud_governance/policy/ibm/tag_baremetal.py): Tag IBM baremetal machines
* [tag_vm](cloud_governance/policy/ibm/tag_vm.py): Tga IBM Virtual Machines machines
** You can write your own policy using [Cloud-Custodian](https://cloudcustodian.io/docs/quickstart/index.html)
and run it (see 'custom cloud custodian policy' in [Policy workflows](#policy-workloads)).
Reference:
* The cloud-governance package is placed in [PyPi](https://pypi.org/project/cloud-governance/)
* The cloud-governance container image is placed in [Quay.io](https://quay.io/repository/ebattat/cloud-governance)
* The cloud-governance readthedocs link is [ReadTheDocs](https://cloud-governance.readthedocs.io/en/latest/)
_**Table of Contents**_
<!-- TOC -->
- [Installation](#installation)
- [Configuration](#configuration)
- [Run AWS Policy Using Podman](#run-aws-policy-using-podman)
- [Run IBM Policy Using Podman](#run-ibm-policy-using-podman)
- [Run Policy Using Pod](#run-policy-using-pod)
- [Pytest](#pytest)
- [Post Installation](#post-installation)
<!-- /TOC -->
## Installation
#### Download cloud-governance image from quay.io
```sh
# Need to run it with root privileges
sudo podman pull quay.io/ebattat/cloud-governance
```
#### Environment variables description:
(mandatory)AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID
(mandatory)AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY
##### Policy name:
(mandatory)policy=ec2_idle / ec2_run / ebs_unattached / ebs_in_use / tag_cluster_resource / zombie_cluster_resource / tag_ec2_resource
##### Policy logs output
(mandatory)policy_output=s3://redhat-cloud-governance/logs
##### Cluster or instance name:
(mandatory policy:tag_cluster_resource)resource_name=ocs-test
##### Cluster or instance tags:
(mandatory policy:tag_cluster_resource)mandatory_tags="{'Owner': 'Name','Email': 'name@redhat.com','Purpose': 'test'}"
##### gitleaks
(mandatory policy: gitleaks)git_access_token=$git_access_token
(mandatory policy: gitleaks)git_repo=https://github.com/redhat-performance/cloud-governance
(optional policy: gitleaks)several_repos=yes/no (default = no)
##### Choose a specific region or all for all the regions, default : us-east-2
(optional)AWS_DEFAULT_REGION=us-east-2/all (default = us-east-2)
##### Choose dry run or not, default yes
(optional)dry_run=yes/no (default = yes)
##### Choose log level, default INFO
(optional)log_level=INFO (default = INFO)
#### LDAP hostname to fetch mail records
LDAP_HOST_NAME=ldap.example.com
#### Enable Google Drive API in console and create Service account
GOOGLE_APPLICATION_CREDENTIALS=$pwd/service_account.json
# Configuration
### AWS Configuration
#### Create a user and a bucket
* Create user with IAM [iam](iam/clouds)
* Create a logs bucket [create_bucket.sh](iam/cloud/aws/create_bucket.sh)
### IBM Configuration
* Create classic infrastructure API key
## Run AWS Policy Using Podman
```sh
# policy=ec2_idle
sudo podman run --rm --name cloud-governance -e policy="ec2_idle" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e dry_run="yes" -e policy_output="s3://bucket/logs" -e log_level="INFO" "quay.io/ebattat/cloud-governance"
# policy=ec2_run
sudo podman run --rm --name cloud-governance -e policy="ec2_run" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e dry_run="yes" -e policy_output="s3://bucket/logs" -e log_level="INFO" "quay.io/ebattat/cloud-governance"
# select policy ['ec2_stop', 's3_inactive', 'empty_roles', 'ip_unattached', 'nat_gateway_unused', 'zombie_snapshots']
sudo podman run --rm --name cloud-governance -e policy="policy" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e dry_run="yes" -e log_level="INFO" "quay.io/ebattat/cloud-governance"
# policy=ebs_unattached
sudo podman run --rm --name cloud-governance -e policy="ebs_unattached" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e dry_run="yes" -e policy_output="s3://bucket/logs" -e log_level="INFO" "quay.io/ebattat/cloud-governance"
# policy=ebs_in_use
sudo podman run --rm --name cloud-governance -e policy="ebs_in_use" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e dry_run="yes" -e policy_output="s3://bucket/logs" -e log_level="INFO" "quay.io/ebattat/cloud-governance"
# policy=zombie_cluster_resource
sudo podman run --rm --name cloud-governance -e policy="zombie_cluster_resource" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e dry_run="yes" -e resource="zombie_cluster_elastic_ip" -e cluster_tag="kubernetes.io/cluster/test-pd9qq" -e log_level="INFO" "quay.io/ebattat/cloud-governance"
# policy=tag_resources
sudo podman run --rm --name cloud-governance -e policy="tag_resources" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e tag_operation="read/update/delete" -e mandatory_tags="{'Owner': 'Name','Email': 'name@redhat.com','Purpose': 'test'}" -e log_level="INFO" -v "/etc/localtime":"/etc/localtime" "quay.io/ebattat/cloud-governance"
# policy=tag_non_cluster
sudo podman run --rm --name cloud-governance -e policy="tag_non_cluster" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e tag_operation="read/update/delete" -e mandatory_tags="{'Owner': 'Name','Email': 'name@redhat.com','Purpose': 'test'}" -e log_level="INFO" -v "/etc/localtime":"/etc/localtime" "quay.io/ebattat/cloud-governance"
# policy=tag_iam_user
sudo podman run --rm --name cloud-governance -e policy="tag_iam_user" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e user_tag_operation="read/update/delete" -e remove_tags="['Environment', 'Test']" -e username="test_username" -e file_name="tag_user.csv" -e log_level="INFO" -v "/home/user/tag_user.csv":"/tmp/tag_user.csv" --privileged "quay.io/ebattat/cloud-governance"
# policy=cost_explorer
sudo podman run --rm --name cloud-governance -e policy="cost_explorer" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e es_host="$elasticsearch_host" -e es_port="$elasticsearch_port" -e es_index="$elasticsearch_index" -e cost_metric=UnblendedCost -e start_date="$start_date" -e end_date="$end_date" -e granularity="DAILY" -e cost_explorer_tags="['User', 'Budget', 'Project', 'Manager', 'Owner', 'LaunchTime', 'Name', 'Email']" -e log_level="INFO" "quay.io/ebattat/cloud-governance:latest"
sudo podman run --rm --name cloud-governance -e policy="cost_explorer" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e es_index="elasticsearch_index" -e cost_metric="UnblendedCost" -e start_date="$start_date" -e end_date="$end_date" -e granularity="DAILY" -e cost_explorer_tags="['User', 'Budget', 'Project', 'Manager', 'Owner', 'LaunchTime', 'Name', 'Email']" -e file_name="cost_explorer.txt" -v "/home/cost_explorer.txt":"/tmp/cost_explorer.txt" -e log_level="INFO" "quay.io/ebattat/cloud-governance:latest"
# policy=validate_iam_user_tags
sudo podman run --rm --name cloud-governance -e policy="validate_iam_user_tags" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e validate_type="spaces/tags" -e user_tags="['Budget', 'User', 'Owner', 'Manager', 'Environment', 'Project']" -e log_level="INFO" "quay.io/ebattat/cloud-governance:latest"
# policy=gitleaks
sudo podman run --rm --name cloud-governance -e policy="gitleaks" -e git_access_token="$git_access_token" -e git_repo="https://github.com/redhat-performance/cloud-governance" -e several_repos="no" -e log_level="INFO" "quay.io/ebattat/cloud-governance"
# custom cloud custodian policy (path for custom policy: -v /home/user/custodian_policy:/custodian_policy)
sudo podman run --rm --name cloud-governance -e policy="/custodian_policy/policy.yml" -e AWS_ACCESS_KEY_ID="$AWS_ACCESS_KEY_ID" -e AWS_SECRET_ACCESS_KEY="$AWS_SECRET_ACCESS_KEY" -e AWS_DEFAULT_REGION="us-east-2" -e dry_run="yes" -e policy_output="s3://bucket/logs" -e log_level="INFO" -v "/home/user/custodian_policy":"/custodian_policy" --privileged "quay.io/ebattat/cloud-governance"
```
## Run IBM Policy Using Podman
```sh
# policy=tag_baremetal
podman run --rm --name cloud-governance -e policy="tag_baremetal" -e account="$account" -e IBM_API_USERNAME="$IBM_API_USERNAME" -e IBM_API_KEY="$IBM_API_KEY" -e SPREADSHEET_ID="$SPREADSHEET_ID" -e GOOGLE_APPLICATION_CREDENTIALS="$GOOGLE_APPLICATION_CREDENTIALS" -v $GOOGLE_APPLICATION_CREDENTIALS:$GOOGLE_APPLICATION_CREDENTIALS -e LDAP_USER_HOST="$LDAP_USER_HOST" -e tag_operation="update" -e log_level="INFO" -v "/etc/localtime":"/etc/localtime" "quay.io/ebattat/cloud-governance:latest"
# tag=tab_vm
podman run --rm --name cloud-governance -e policy="tag_vm" -e account="$account" -e IBM_API_USERNAME="$IBM_API_USERNAME" -e IBM_API_KEY="$IBM_API_KEY" -e SPREADSHEET_ID="$SPREADSHEET_ID" -e GOOGLE_APPLICATION_CREDENTIALS="$GOOGLE_APPLICATION_CREDENTIALS" -v $GOOGLE_APPLICATION_CREDENTIALS:$GOOGLE_APPLICATION_CREDENTIALS -e LDAP_USER_HOST="$LDAP_USER_HOST" -e tag_operation="update" -e log_level="INFO" -v "/etc/localtime":"/etc/localtime" "quay.io/ebattat/cloud-governance:latest"
```
## Run Policy Using Pod
#### Run as a pod job via OpenShift
Job Pod: [cloud-governance.yaml](pod_yaml/cloud-governance.yaml)
Configmaps: [cloud_governance_configmap.yaml](pod_yaml/cloud_governance_configmap.yaml)
Quay.io Secret: [quayio_secret.sh](pod_yaml/quayio_secret.sh)
AWS Secret: [cloud_governance_secret.yaml](pod_yaml/cloud_governance_secret.yaml)
* Need to convert secret key to base64 [run_base64.py](pod_yaml/run_base64.py)
## Pytest
##### Cloud-governance integration tests using pytest
```sh
python3 -m venv governance
source governance/bin/activate
(governance) $ python -m pip install --upgrade pip
(governance) $ pip install coverage
(governance) $ pip install pytest
(governance) $ git clone https://github.com/redhat-performance/cloud-governance
(governance) $ cd cloud-governance
(governance) $ coverage run -m pytest
(governance) $ deactivate
rm -rf *governance*
```
## Post Installation
#### Delete cloud-governance image
```sh
sudo podman rmi quay.io/ebattat/cloud-governance
```
نیازمندی
| مقدار | نام |
|---|---|
| ==21.4.0 | attrs |
| ==1.12.0 | azure-identity |
| ==3.0.0 | azure-mgmt-costmanagement |
| ==3.1.1 | azure-mgmt-subscription |
| ==6.0.0 | azure-mgmt-billing |
| ==1.29.1 | botocore |
| ==1.26.1 | boto3 |
| ==7.11.0 | elasticsearch |
| ==7.4.0 | elasticsearch-dsl |
| ==2.57.0 | google-api-python-client |
| ==0.1.0 | google-auth-httplib2 |
| ==0.5.2 | google-auth-oauthlib |
| ==1.9.1 | google-cloud-billing |
| ==3.5.0 | google-cloud-bigquery |
| ==0.27.0 | ibm-platform-services |
| ==0.17.0 | myst-parser |
| - | pandas |
| ==1.55 | PyGitHub |
| ==3.4.2 | python-ldap |
| ==2.27.1 | requests |
| ==0.9.2 | retry |
| ==6.0.0 | SoftLayer |
| ==4.5.0 | sphinx |
| ==1.0.0 | sphinx-rtd-theme |
| ==3.7.4.3 | typing |
| ==2.13.3 | typeguard |
| ==3.8.1 | aiohttp |
| ==1.26.7 | urllib3 |
| ~=3.1.1 | oauthlib |
نحوه نصب
نصب پکیج whl cloud-governance-1.1.93:
pip install cloud-governance-1.1.93.whl
نصب پکیج tar.gz cloud-governance-1.1.93:
pip install cloud-governance-1.1.93.tar.gz